CVE-2017-17285 — Huawei Technologies Co., Ltd. / LON-AL00B

Description (CNA)

Bluetooth module in some Huawei mobile phones with software LON-AL00BC00B229 and earlier versions has a buffer overflow vulnerability. Due to insufficient input validation, an unauthenticated attacker may craft Bluetooth AVDTP/AVCTP messages after successful paring, causing buffer overflow. Successful exploit may cause code execution.

Affected (CNA)

Vendor / product	Versions
Huawei Technologies Co., Ltd. / LON-AL00B	affected LON-AL00BC00B229 and earlier versions

CWE

No CWE identifiers supplied.

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180129-01-bluetooth-en

ADP enrichment

CVE

No English description supplied.

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180129-01-bluetooth-en